urlquery.net
WEBSITE ANALYSIS REPORT

http://nicefap.fun/sj2wszg0e3bin

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET404document7.4 KB213 ms1 alerts
GET301document0 B257 ms1 alerts
GET404document7.4 KB78 ms1 alerts
GET200stylesheet215.5 KB37 ms1 alerts
GET200stylesheet23.2 KB50 ms1 alerts
GET200script85.5 KB45 ms1 alerts
GET200script18.5 KB20 ms1 alerts
GET200script61.9 KB43 ms1 alerts
GET200script30.8 KB31 ms1 alerts
GET200script55.5 KB50 ms1 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://nicefap.fun/themes/altum/assets/js/libraries/fontawesome.min.js?v=4100

IP / ASN

Country unknown 104.21.62.166

AS13335 · CLOUDFLARENET

Requested by
https://nicefap.fun/sj2wszg0e3bin

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /themes/altum/assets/js/libraries/fontawesome.min.js?v=4100 HTTP/1.1
Host: nicefap.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://nicefap.fun/sj2wszg0e3bin
Cookie: PHPSESSID=3lsc9t1hq1sss5a9juduc7lvmb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Thu, 08 Oct 2026 14:00:55 GMT
content-type: text/javascript
server-timing: cfExtPri
cache-control: public, max-age=2592000
expires: Mon, 26 Oct 2026 20:32:40 GMT
last-modified: Tue, 01 Aug 2023 17:57:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
age: 1013294
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xXbmbPI3bSUBVhgxau8FVCeariMqAFqORzxzozKhxcZPTDved7HpZSJfU5fe%2FEMMQOF9yRIdGwj%2BpJtDEBSK0xeE1JbMuE%2BvZwGKfm3FWAzcWI6qrE%2BAjI7OT5RILQ%3D%3D"}]}
cf-ray: a475acb29b6b0b45-OSL
content-length: 15372

GET200script806.9 KB23 ms1 alerts
GET200script465.1 KB43 ms1 alerts
GET200lazy-img23.0 KB19 ms1 alerts
GET200img20.8 KB18 ms1 alerts
GET302script0 B7 ms1 alerts
GET200script22.3 KB28 ms1 alerts
POST200xhr0 B11 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot